CVE-2026-105711

The record

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.0 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, when a merge request in a public project referenced a confidential issue from a private project, an authenticated user with no project membership could have read the confidential issue's title, due to a viewer-independent fragment cache key that incorrectly shared per-user-redacted rendered content across all users.

Affected packages

Related vulnerabilities

• CVE-2026-105752 vLLM is an inference and serving engine for large language models. CWE-524
• CVE-2026-94543 Next.js is a React framework for building full-stack web applications. CWE-524
• CVE-2026-94484 Next.js is a React framework for building full-stack web applications. CWE-524
• CVE-2026-93748 http-cache-semantics through 4.2.0 fails to properly validate security-zeroed cache… CWE-524
• CVE-2026-88059 Angular is a development platform for building mobile and desktop web applications using… CWE-524
• CVE-2026-82755 Use of Cache Containing Sensitive Information vulnerability in ash-project… CWE-524
• CVE-2026-84933 undici's cache interceptor does not handle the Set-Cookie response header anywhere in its… CWE-524
• CVE-2026-59903 Netty is an asynchronous, event-driven network application framework. CWE-524